codingest AGENTS.md

Repository-specific instructions for Claude Code, an AI coding assistant, when working on codingest. They explain the project structure, coding conventions, and how to inspect its code graph.

In plain words
What is it for?
Analysing bugs, reviewing code, making behaviour-preserving refactors, and keeping generated instruction files and code-graph behaviour consistent.
Why use it?
They give the assistant project context and a consistent way to investigate changes, reducing guesses and mismatches with the repository's rules.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/kkollsga/codingest/agents-md
Clone the repo
git clone --depth 1 https://github.com/kkollsga/codingest

Made for: Codex, OpenCode.

Per session 3,786 This file is loaded in full into every session.
When invoked 3,786 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.03786 $0.03786
Opus 5 $0.01893 $0.01893
Sonnet 5 $0.00757 $0.00757
Haiku 4.5 $0.00379 $0.00379

Measured yesterday against content hash 4b9b5feaad62, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

codingest AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

Copies of this mod

1 near-identical copy found in the catalogue:

AGENTS.md · 224 lines

How it starts

The opening of the file, as written. The whole thing — 224 lines — stays where its author put it; the contents beside it link to each section on GitHub.

codingest — project instructions

Standalone extraction of KGLite's code_tree component: parse polyglot codebases into queryable kglite knowledge graphs. The graph engine and MCP server are imported from KGLite as cargo libraries; this repo owns only the code-tree component. See README.md for the workspace map and PARITY.md / BENCHMARKS.md for the regression record.

Authority: CLAUDE.md is the authority this repo's conventions are regenerated from, with AGENTS.md as its generated adapter; for the skills the authority is tracked .agents/skills/, and .claude/skills/ is a generated adapter of it. Edit the authority and regenerate in the same action — never edit an adapter. (This line is exempt from the CLAUDE.mdAGENTS.md substitution — it names the authority literally in every copy, per doctrine R7/R14.)

Working style

  • Evidence over assertion. For a bug, reproduce it and confirm the root cause with evidence before fixing. For a behaviour-preserving refactor, probe the actual graph output first — don't trust your mental model.
  • No bugs left behind. A defect you notice mid-task gets fixed (in scope) or filed via add-todo (out of scope) — never silently stepped over. The builder now lives only here, so builder bugs are ours to fix; if it traces to the shared kglite engine (kglite::api, Cypher, storage), route it to KGLite via notify (KGLite is read-only here).
  • Offload, don't print. Write long output (stats JSON, bench tables, graph dumps, big diffs) to dev-docs/temp/ (>1-day purge) or dev-docs/bench/out/ and report the path. Keep responses under ~400 tokens.
  • Tooling discipline. Don't read a gate's status through a tail/head pipe that can hide a failure — confirm the command actually reported success. After any builder/parser change, run cargo test (not just a hand-picked subset), and always the parity test if transformed code_tree source moved. Three more shapes of the same trap, each of which failed in the reassuring direction (doctrine R2):
    • git add with one bad pathspec stages NOTHING. It is all-or-nothing: one typo'd or since-renamed path aborts the whole invocation, so the other files are not staged either — and the following git commit still succeeds, on a commit missing the change. Read back git diff --cached --name-only.
    • grep -c exits 1 when the count is zero, so grep -c … && next breaks the chain on exactly the empty result you needed to act on, and under set -e it kills the script. Capture it (n=$(… | grep -c … || true)) and test the number.
    • A backgrounded command's output must be read from its artifact. An echoed exit status, a "done" line, or the absence of visible errors is not the result — open the log the run wrote. This is how a failed background build reports green.
    • Recipes never invoke bare python and never verify via >/dev/null 2>&1; echo $?. A shell alias makes bare python report the alias's failure as the checker's verdict, and the null-masked $? hides which command failed — use the venv interpreter and read the target command's own status.
  • Testing cadence: targeted per landing, the full battery once at the end. A landing's gate is the suites chosen to catch what that change could break — its touched surface plus that surface's direct consumers. This does not weaken "run cargo test, not just a hand-picked subset": the Rust battery is cheap and stays the per-phase gate. It applies to the heavy make gate steps (release-gate scripts, bench smoke, wheel + tests/python) — those run once before a branch's first push and once over the union at the program's end, never per phase. Per-phase heavy runs buy nothing a completion-time run does not, and their cost is what makes agents quietly stop running them.

Read the full file on GitHub · 224 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 224 lines · 3,786 tokens per session scan A 4b9b5feaad62

Subscribe to this mod's changes

codingest AGENTS.md is an instructions file published in the GitHub repository kkollsga/codingest (0 stars, last pushed yesterday), licensed MIT. It adds 3,786 tokens to every session, about $0.0189 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other instructions, from other repositories

codex AGENTS.md

AGENTS.md instructions for openai/codex, covering rust/codex-rs, the codex-core crate, code review rules, crate api surface and model visible context.

openai/codex · 5,182 tokens

vscode buildNext.instructions.md

Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).

microsoft/vscode · 6,785 tokens

next.js AGENTS.md

Instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.

vercel/next.js · 7,296 tokens

vscode oss-third-party-notices.instructions.md

Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, applying the notice (cutover) and fallback chain (never fail the build).

microsoft/vscode · 5,001 tokens

spec-kit AGENTS.md

AGENTS.md instructions for github/spec-kit, covering agents.md, about spec kit and specify, quickstart — add a new integration in 5 steps, integration architecture and integrationmanifest — file tracking.

github/spec-kit · 7,104 tokens

langchain AGENTS.md

AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.

langchain-ai/langchain · 4,345 tokens